Things that made me think: Open Source trust relationships, knowledge without provenance, and theory building (opens in new tab)

is a place to collect interesting things I’ve seen, read, or heard, along with some brief thoughts (often incomplete and/or inconclusive) that they provoked. – socket.dev Back in February this report landed in a security blog, and I found it fascinating. As is usual for me, it’s at the intersection of human behaviour with technological automation that the real interesting problems lie. The whole industry uses GitHub profiles as a proxy for a CV. Now agents can build a credible looking one in ...